A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens. Forever Security discovered the risk after stopping an agent on a real customer’s computer from installing a known malicious npm package. The company later reproduced separate attack paths against OpenAI Codex […]
This article has been indexed from Cyber Security News
Read the original article:
Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files in Downloads Folder